Utterly nonexistent, which is why I'm surprised to see people making such a big damn deal over it. The privacy implications of having an identifiable account on any of the services used for AoC login are enormous by comparison, but I guess there's always some folks who'll "strain out gnats, yet swallow camels".